From 5943ac6b6b89f8ffd161de5a73fa11143cefe5d6 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 22 Sep 2026 14:12:23 +0000 Subject: [PATCH 1/2] fix(deps): update module github.com/google/go-github/v89 to v91 --- go.mod | 1 + go.sum | 1 + 2 files changed, 2 insertions(+) diff --git a/go.mod b/go.mod index a903cb7..3d98031 100644 --- a/go.mod +++ b/go.mod @@ -11,6 +11,7 @@ require ( github.com/go-git/go-git/v5 v5.19.2 github.com/go-openapi/strfmt v0.27.0 github.com/google/go-github/v89 v89.0.0 + github.com/google/go-github/v91 v91.0.0 github.com/open-policy-agent/opa v1.19.0 github.com/opencontainers/image-spec v1.1.1 github.com/sigstore/cosign/v3 v3.1.3 diff --git a/go.sum b/go.sum index e113761..1c9f349 100644 --- a/go.sum +++ b/go.sum @@ -310,6 +310,7 @@ github.com/google/go-containerregistry v0.21.7 h1:/vPFuVXDjtFREsVArW+0h1CIl5urnO github.com/google/go-containerregistry v0.21.7/go.mod h1:kjSbt7/zMsKLWfnHrIvKvhXHUw91jbe9DNjPPJ32gXE= github.com/google/go-github/v89 v89.0.0 h1:35bEK5XoEcF3PZrlVbl9XN63f5BcJRA/UGkxeC9xPg0= github.com/google/go-github/v89 v89.0.0/go.mod h1:QLcbU0ipeAqQuR5KSg8c2lql4Qk1EwJ2dWz/0rP4Nho= +github.com/google/go-github/v91 v91.0.0/go.mod h1:rHtn7haKvmkTLhUK/aCQypiIj/suWSB3rnS+a1FdH6M= github.com/google/go-querystring v1.2.0 h1:yhqkPbu2/OH+V9BfpCVPZkNmUXhb2gBxJArfhIxNtP0= github.com/google/go-querystring v1.2.0/go.mod h1:8IFJqpSRITyJ8QhQ13bmbeMBDfmeEJZD5A0egEOmkqU= github.com/google/gofuzz v1.2.0 h1:xRy4A+RhZaiKjJ1bPfwQ8sedCA+YS2YcCHW6ec7JMi0= From 6a3cd637a5045d50aa071e2b0cf8bac1f9befac5 Mon Sep 17 00:00:00 2001 From: ian hundere <138915+ianhundere@users.noreply.github.com> Date: Thu, 24 Sep 2026 13:32:55 -0700 Subject: [PATCH 2/2] fix(deps): migrate GitHub clients and pointer helpers to v91 --- cmd/verify/attestation.go | 2 +- go.mod | 1 - go.sum | 131 ++++-------------- pkg/attestations/attestations.go | 2 +- pkg/attestations/attestations_example_test.go | 2 +- pkg/attestations/attestations_test.go | 2 +- pkg/download/download.go | 2 +- pkg/download/download_test.go | 2 +- pkg/github/client.go | 2 +- pkg/orchestrate/verify.go | 2 +- pkg/orchestrate/verify_test.go | 2 +- pkg/policy/ghrelease.go | 2 +- pkg/policy/ghrelease_test.go | 4 +- pkg/predicate/config.go | 2 +- pkg/predicate/source_review_service.go | 2 +- pkg/predicate/source_review_service_test.go | 2 +- pkg/predicate/sourcereview.go | 2 +- pkg/predicate/sourcereview_test.go | 52 +++---- pkg/release/cut.go | 30 ++-- pkg/release/cut_test.go | 40 +++--- pkg/release/github_api.go | 2 +- pkg/release/github_api_test.go | 76 +++++----- pkg/release/publish.go | 4 +- pkg/release/publish_test.go | 2 +- 24 files changed, 144 insertions(+), 226 deletions(-) diff --git a/cmd/verify/attestation.go b/cmd/verify/attestation.go index ffced48..2faa8c1 100644 --- a/cmd/verify/attestation.go +++ b/cmd/verify/attestation.go @@ -11,7 +11,7 @@ import ( "path/filepath" "strings" - "github.com/google/go-github/v89/github" + "github.com/google/go-github/v91/github" "github.com/liatrio/autogov/pkg/certid" "github.com/liatrio/autogov/pkg/cli" ghclient "github.com/liatrio/autogov/pkg/github" diff --git a/go.mod b/go.mod index 3d98031..eb7fa2b 100644 --- a/go.mod +++ b/go.mod @@ -10,7 +10,6 @@ require ( github.com/go-git/go-billy/v5 v5.9.1 github.com/go-git/go-git/v5 v5.19.2 github.com/go-openapi/strfmt v0.27.0 - github.com/google/go-github/v89 v89.0.0 github.com/google/go-github/v91 v91.0.0 github.com/open-policy-agent/opa v1.19.0 github.com/opencontainers/image-spec v1.1.1 diff --git a/go.sum b/go.sum index 1c9f349..3720ad8 100644 --- a/go.sum +++ b/go.sum @@ -88,8 +88,6 @@ github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM= github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw= github.com/blang/semver v3.5.1+incompatible h1:cQNTCjp13qL8KC3Nbxr/y2Bqb63oX6wdnnjpJbkM4JQ= github.com/blang/semver v3.5.1+incompatible/go.mod h1:kRBLl5iJ+tD4TcOOxsy/0fnwebNt5EWlYSAyrTnjyyk= -github.com/bytecodealliance/wasmtime-go/v44 v44.0.0 h1:WRZXnLPIer/TWs5aYPaMlmVcOlzmR6Ur6wjLRIQOhTQ= -github.com/bytecodealliance/wasmtime-go/v44 v44.0.0/go.mod h1:GP93piU+39CoFVCQ5xfHrPOUtL0APlMnkbblJ2d3YY0= github.com/cenkalti/backoff/v4 v4.3.0 h1:MyRJ/UdXutAwSAT+s3wNd7MfTIcy71VQueUuFK343L8= github.com/cenkalti/backoff/v4 v4.3.0/go.mod h1:Y3VNntkOUPxTVeUxJ/G5vcM//AlwfmyYozVcomhLiZE= github.com/cenkalti/backoff/v5 v5.0.3 h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM= @@ -118,8 +116,6 @@ github.com/cloudflare/circl v1.6.3 h1:9GPOhQGF9MCYUeXyMYlqTR6a5gTrgR/fBLXvUgtVcg github.com/cloudflare/circl v1.6.3/go.mod h1:2eXP6Qfat4O/Yhh8BznvKnJ+uzEoTQ6jVKJRn81BiS4= github.com/codahale/rfc6979 v0.0.0-20141003034818-6a90f24967eb h1:EDmT6Q9Zs+SbUoc7Ik9EfrFqcylYqgPZ9ANSbTAntnE= github.com/codahale/rfc6979 v0.0.0-20141003034818-6a90f24967eb/go.mod h1:ZjrT6AXHbDs86ZSdt/osfBi5qfexBrKUdONk989Wnk4= -github.com/coreos/go-oidc/v3 v3.18.0 h1:V9orjXynvu5wiC9SemFTWnG4F45v403aIcjWo0d41+A= -github.com/coreos/go-oidc/v3 v3.18.0/go.mod h1:DYCf24+ncYi+XkIH97GY1+dqoRlbaSI26KVTCI9SrY4= github.com/coreos/go-oidc/v3 v3.20.0 h1:EtE0WIBHk03N+DqGkY4+UONzzZHk7amKt6IyNd7OsZE= github.com/coreos/go-oidc/v3 v3.20.0/go.mod h1:DYCf24+ncYi+XkIH97GY1+dqoRlbaSI26KVTCI9SrY4= github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g= @@ -137,8 +133,8 @@ github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.1 h1:5RVFMOWjMyRy8cARdy79nAmgYw3hK/4HUq48LQ6Wwqo= github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.1/go.mod h1:ZXNYxsqcloTdSy/rNShjYzMhyjf0LaoftYK0p+A3h40= -github.com/dgraph-io/badger/v4 v4.9.2 h1:Wb5qw8gElqwV1a8msHTeQKova9b1V10heFKMIiPd80E= -github.com/dgraph-io/badger/v4 v4.9.2/go.mod h1:nJjaJTUOSsQEBhsq209FmwCvMJzEA3e74RjZw6V2pQI= +github.com/dgraph-io/badger/v4 v4.9.4 h1:bcw+waCpzRZ2nmcSPbnPvDVhiEsn98TKmvnAhK7r7LM= +github.com/dgraph-io/badger/v4 v4.9.4/go.mod h1:nJjaJTUOSsQEBhsq209FmwCvMJzEA3e74RjZw6V2pQI= github.com/dgraph-io/ristretto/v2 v2.2.0 h1:bkY3XzJcXoMuELV8F+vS8kzNgicwQFAaGINAEJdWGOM= github.com/dgraph-io/ristretto/v2 v2.2.0/go.mod h1:RZrm63UmcBAaYWC1DotLYBmTvgkrs0+XhBd7Npn7/zI= github.com/dgryski/trifles v0.0.0-20230903005119-f50d829f2e54 h1:SG7nF6SRlWhcT7cNTs5R6Hk4V2lcmLz2NsG2VnInyNo= @@ -176,109 +172,69 @@ github.com/go-chi/chi/v5 v5.3.0 h1:halUjDxhshgXHMrao5bB8eNBXo/rnzwr8m5m36glehM= github.com/go-chi/chi/v5 v5.3.0/go.mod h1:R+tYY2hNuVUUjxoPtqUdgBqevM9s9njzkTLutVsOCto= github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 h1:+zs/tPmkDkHx3U66DAb0lQFJrpS6731Oaa12ikc+DiI= github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376/go.mod h1:an3vInlBmSxCcxctByoQdvwPiA7DTK7jaaFDBTtu0ic= -github.com/go-git/go-billy/v5 v5.9.0 h1:jItGXszUDRtR/AlferWPTMN4j38BQ88XnXKbilmmBPA= -github.com/go-git/go-billy/v5 v5.9.0/go.mod h1:jCnQMLj9eUgGU7+ludSTYoZL/GGmii14RxKFj7ROgHw= github.com/go-git/go-billy/v5 v5.9.1 h1:8U73XiOTfINdItHVa6z4Gv7ToObcZ6grkqQbLryLCdA= github.com/go-git/go-billy/v5 v5.9.1/go.mod h1:ExsU+jcGwXTBOnyilvAnEM1wug1IxHr4yP2ZXsNRtV0= github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20231010084843-55a94097c399 h1:eMje31YglSBqCdIqdhKBW8lokaMrL3uTkpGYlE2OOT4= github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20231010084843-55a94097c399/go.mod h1:1OCfN199q1Jm3HZlxleg+Dw/mwps2Wbk9frAWm+4FII= -github.com/go-git/go-git/v5 v5.19.1 h1:nX27AnaU43/K5bKktKwgBmR9lawoYVe1Ckg0rgzzN00= -github.com/go-git/go-git/v5 v5.19.1/go.mod h1:Pb1v0c7/g8aGQJwx9Us09W85yGoyvSwuhEGMH7zjDKQ= github.com/go-git/go-git/v5 v5.19.2 h1:wkfn7vOlUBu8ivAWKBWisTiwJK4jYHzTF8Ndv1LyGqY= github.com/go-git/go-git/v5 v5.19.2/go.mod h1:QqCBE1EFN5ddFmrliLQ3/ntRCUjZU3EJuwuB/jWEHjk= github.com/go-jose/go-jose/v4 v4.1.4 h1:moDMcTHmvE6Groj34emNPLs/qtYXRVcd6S7NHbHz3kA= github.com/go-jose/go-jose/v4 v4.1.4/go.mod h1:x4oUasVrzR7071A4TnHLGSPpNOm2a21K9Kf04k1rs08= github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A= -github.com/go-logr/logr v1.4.3 h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI= -github.com/go-logr/logr v1.4.3/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY= github.com/go-logr/logr v1.4.4 h1:tG4xh9yMsRCAiodLVTxyrkzSZ9+o0L1Kg/+cPVcbP/8= github.com/go-logr/logr v1.4.4/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY= github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag= github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE= -github.com/go-openapi/analysis v0.25.2 h1:I0vy4n3alz+DHTiN1PRhCb7QZxkK6g5YmswZKv2TKuw= -github.com/go-openapi/analysis v0.25.2/go.mod h1:Uhs1t/2XR10EnwONYILGEzw8gcfGIG5Xk5K2AxnhqDo= github.com/go-openapi/analysis v0.25.5 h1:xPYEvTb90o1y0epuiOPAoG4QqahjP3cdp5xNlHeKJRI= github.com/go-openapi/analysis v0.25.5/go.mod h1:d3UGtQC5uq5Kqqqis2VH09Km/v3vwsWrYkbp4gdm+Rc= github.com/go-openapi/errors v0.22.8 h1:oP7sW7TWc3wFFjrzzj0nI83H2qMBkNjNfSd+XRejk/I= github.com/go-openapi/errors v0.22.8/go.mod h1:BuUoHcYrU6E7V9gfj1I5wLQqgtIHnup/alXZ8KdgQ0w= -github.com/go-openapi/jsonpointer v0.23.1 h1:1HBACs7XIwR2RcmItfdSFlALhGbe6S92p0ry4d1GWg4= -github.com/go-openapi/jsonpointer v0.23.1/go.mod h1:iWRmZTrGn7XwYhtPt/fvdSFj1OfNBngqRT2UG3BxSqY= github.com/go-openapi/jsonpointer v1.0.0 h1:kR9tHqY0CtZaOPVFm622dPVNhrvYpwr4uCxgL3h1H8s= github.com/go-openapi/jsonpointer v1.0.0/go.mod h1:Z3rw7dWu1p9IgitXCFamSlA5lmDiklEB6vkaxcNZW5Y= -github.com/go-openapi/jsonreference v0.21.6 h1:NZ5nGfnaM1n4I43Xjm1e5/M2GjOwQwndQz22uhxwD+Y= -github.com/go-openapi/jsonreference v0.21.6/go.mod h1:xzbgtQ3ZbWxvET3AxdzCJlJt6vkovbf+IfSPJjD0tUY= github.com/go-openapi/jsonreference v1.0.0 h1:jlmTr6torcd1YgDQvSfNmRtKzYDO4FGBkrAdlAVWnpY= github.com/go-openapi/jsonreference v1.0.0/go.mod h1:jtwdyGbJk0Xhe5Y+rwtglQP6Sb1WZST4rT32LWB+sv0= -github.com/go-openapi/loads v0.24.0 h1:4LLorXRPTzIN9V6ngMUZbAscsBOUBk3Oa8cClu/bFrQ= -github.com/go-openapi/loads v0.24.0/go.mod h1:xQMgX+hw5xRAhGrcDXxeMw78IFqUpIzhleu3HqPhyF4= github.com/go-openapi/loads v0.25.0 h1:74Bc2snfaVlsHzwdQj/3gsA9XJz3daXTJVs+4ZaK7jI= github.com/go-openapi/loads v0.25.0/go.mod h1:JFBw4SIB9+PTIFHDfcXuSSy5h6aWzjtUCrPYyx3qWU8= -github.com/go-openapi/runtime v0.32.4 h1:8ElGj/3goG0itt0nBPP6Cm57ehcYyuHoI3O20nxgvkw= -github.com/go-openapi/runtime v0.32.4/go.mod h1:Bz6keOZw1NX4T6f+m42OoT1MBPDt6Re13dbccHyGH/4= github.com/go-openapi/runtime v0.33.0 h1:Dd3Oj2ig+WH8ckK95l0Wn2V8a4bH/UqWPRZVT0vc8yU= github.com/go-openapi/runtime v0.33.0/go.mod h1:+rsupH3+TFKqmFysqkmgBOTxpVJV8eV+j9myvvea2Xw= github.com/go-openapi/runtime/server-middleware v0.30.0 h1:8rPoJ/xv7JL8BsovaqboKETlpWBArVh8n+0L/GyePog= github.com/go-openapi/runtime/server-middleware v0.30.0/go.mod h1:OYNT/TxNvB/VK5oe4htM2jDTwlEXuejVJmu0DVZfAMs= -github.com/go-openapi/spec v0.22.6 h1:Tyy1pLaNCM8GBCFLoGYLonjJi6zykqyLCjXLc19ZPic= -github.com/go-openapi/spec v0.22.6/go.mod h1:HZvTHat+iH0PALQRWhrqIHtU/PEqxqd89fu0MxGlMeM= github.com/go-openapi/spec v0.22.9 h1:/vKIFDcGKp0ktZWGbym/tJEWbk6/XOEmAVU0kqKMH+w= github.com/go-openapi/spec v0.22.9/go.mod h1:b/mNUYIOQOyIiUzUzXEE8xzyZqf93KvM9hQGP91yfl0= github.com/go-openapi/strfmt v0.27.0 h1:kbcTeaD9TXuXD0hhMXzuYa1sdTo6+dWGvwjW93E80IM= github.com/go-openapi/strfmt v0.27.0/go.mod h1:s/qhDqfY72irigXUGJmtgid2Rm+3tnz3k8hZaRmvWYc= github.com/go-openapi/swag v0.26.1 h1:l5sVEyVpwj+DDYeZyo7wQI/Ebn/mKYIyGB/pFwAfGoQ= github.com/go-openapi/swag v0.26.1/go.mod h1:yNY38BbIVthxbkDtq1UHBCGasBqjakW3lCR6ANzdBEw= -github.com/go-openapi/swag/cmdutils v0.26.1 h1:f2iE1ijYaJ3nuu5PaEMx3zpEhzhZFgivCJObWEObLIQ= -github.com/go-openapi/swag/cmdutils v0.26.1/go.mod h1:Sm1MVFMkF6guJJ+pQqHnQA3N0j9qALV3NxzDSv6bETM= github.com/go-openapi/swag/cmdutils v0.27.0 h1:aIKiqhB29AaP+7xm8/CPg3uOpeHx2SUp6TvMpu/a31Y= github.com/go-openapi/swag/cmdutils v0.27.0/go.mod h1:Sm1MVFMkF6guJJ+pQqHnQA3N0j9qALV3NxzDSv6bETM= -github.com/go-openapi/swag/conv v0.27.0 h1:EKOH4feXrvdo8DbSsXSAqRT8fz1epEnS5O2IfXUOzE8= -github.com/go-openapi/swag/conv v0.27.0/go.mod h1:pfiv0uKQTbaGApk8Zs/lZV3uSjmSpa2FO1y183YngN8= github.com/go-openapi/swag/conv v0.27.3 h1:iqJFmGEjmX3AY0lSszABFqRVqOSt99XS0LzNIMJYuhU= github.com/go-openapi/swag/conv v0.27.3/go.mod h1:nPRmN6jgNme99hpf+nM0auDZGALWIqlwhisKPK/bQhQ= -github.com/go-openapi/swag/fileutils v0.26.1 h1:K1XCM2CGhfNsc6YDt6v7Q5+1e59rftYWdcu/isZhvFw= -github.com/go-openapi/swag/fileutils v0.26.1/go.mod h1:mYUgxQAKX4ShS3qvvySx+/9yrlUnDhjiD1CalaQl8lQ= github.com/go-openapi/swag/fileutils v0.27.3 h1:3UVoZ2RLaIs1lt+2jcKzL8RM3Yk0rmsDE9FLA/HGxFE= github.com/go-openapi/swag/fileutils v0.27.3/go.mod h1:VvJFZLTZS0AI854gEQz5tk7dBESdLjiNUMSZ/th2ry8= github.com/go-openapi/swag/jsonname v0.26.1 h1:VReupaV6WxlAsCn0e4DUfgV6bPmINnPpyJDLqSfNPcE= github.com/go-openapi/swag/jsonname v0.26.1/go.mod h1:OvdW6BoWoj33pTfi7x9vFrgmT+fk7aw0BRwvCE0YOuc= -github.com/go-openapi/swag/jsonutils v0.26.1 h1:2hdBfFkHg+7Wrz2VsCbeyR6hzkRDs7AztnMR2u84yOY= -github.com/go-openapi/swag/jsonutils v0.26.1/go.mod h1:U+RMJH3wa+6BRiphuRtIyI8fW9HPFqFQ4sHk2oRx0UQ= github.com/go-openapi/swag/jsonutils v0.27.3 h1:1DEz+O82frtSMBcos/7XIn1GnpNTbsD4Bru4Dc/uhRc= github.com/go-openapi/swag/jsonutils v0.27.3/go.mod h1:qiDCoQvzkMxrV3G8FLEdIU5L+EFYc0zcDOHWT3Yofvo= -github.com/go-openapi/swag/jsonutils/fixtures_test v0.26.1 h1:1CD7NiLLb/TXl3tOnFYU4b+mNfb5rtgHkaA+q7RMYYQ= -github.com/go-openapi/swag/jsonutils/fixtures_test v0.26.1/go.mod h1:ZWafc8nMdYzTE3uYY6W86f0n46+IF0g4uUyRhJw/kXc= -github.com/go-openapi/swag/loading v0.26.1 h1:E9K4wqXeROlhjFQ13K9zMz6ojFGXIggGe+ad1odrK9w= -github.com/go-openapi/swag/loading v0.26.1/go.mod h1:3qvRIlWzWdq1HvmldwmuJ2ohpcAryN6xVt2OTKd0/7E= +github.com/go-openapi/swag/jsonutils/fixtures_test v0.27.3 h1:h/eT9kmGCDdFLJF29lOhzLtF0FmP1AX2MhLJWVebsb8= +github.com/go-openapi/swag/jsonutils/fixtures_test v0.27.3/go.mod h1:mofwUWx70wvskwESqRJ//k/9kURmCgyJl5m5Ppoh5kY= github.com/go-openapi/swag/loading v0.27.3 h1:L9nQkEgzU7QgFQL+pLEMfGUKxeM4pWwGwbET9Z3weW0= github.com/go-openapi/swag/loading v0.27.3/go.mod h1:rJ0NeaKsF4CVPnMGjPQl7JlSHzvD0bc2DKXLss1hiuE= -github.com/go-openapi/swag/mangling v0.26.1 h1:gpYI4WuPKFJJVjV5cDLGlDVJhFIxYjQc7yN5eEb4CqM= -github.com/go-openapi/swag/mangling v0.26.1/go.mod h1:POETDH01hqAdASXfw7ISEd9bCOE6xBHOt8NHmGZRmYM= github.com/go-openapi/swag/mangling v0.27.3 h1:gRzzD1PAUoLTtGMgI3KpBmCSOlTuLTFWnviLxLcTnyg= github.com/go-openapi/swag/mangling v0.27.3/go.mod h1:jtBE2+V+3pILxOR7Vgce+Cwp6A2PgZbvVqfNntbVs0w= -github.com/go-openapi/swag/netutils v0.26.1 h1:BNctoc39WTAUMxyAs355fExOPzMZtPbZ0ZZ1Am2FR5M= -github.com/go-openapi/swag/netutils v0.26.1/go.mod h1:y02vByhZhQPAVwOX+0KipXFZ/hUbk6G/Enhf5rGaOkQ= github.com/go-openapi/swag/netutils v0.27.0 h1:lEUG+hHvPvLggB3A8snFk0IRKNf9uC0YKc+7WYqvAF8= github.com/go-openapi/swag/netutils v0.27.0/go.mod h1:J+WYyFMLtvtCGqa6jLv+YNUmIKI3ZRQRrvfNDMoQoEQ= github.com/go-openapi/swag/pools v0.27.3 h1:gXjImP3F6/56wRRcFgEPld084Y6u2gs21ikPBt8NKBk= github.com/go-openapi/swag/pools v0.27.3/go.mod h1:kVQefhSK5RWuRe7BXsL8htgBPAMpN7HDGpGEknqugeE= -github.com/go-openapi/swag/stringutils v0.26.1 h1:f88uYyTso7TnHrKM/bUBsQ5e2wKf37cpgo6pvbzd9yU= -github.com/go-openapi/swag/stringutils v0.26.1/go.mod h1:Sc6d3bU8fgk5AyZR8/8jEQ+Is/Ald+TD/IIggPN8UJk= github.com/go-openapi/swag/stringutils v0.27.3 h1:Ru28hnbAvN5wycALQYy8IobHvASq+FUFMlp1QzLM0JI= github.com/go-openapi/swag/stringutils v0.27.3/go.mod h1:lzRN95CxXmA03XcDWHLOb6nOMcxCqR5rGY0lOgsfRoM= -github.com/go-openapi/swag/typeutils v0.27.0 h1:aCf4MSGo8NLwZP8Q6t32DWLJSvl/WwNqgmEG+xJ6v2o= -github.com/go-openapi/swag/typeutils v0.27.0/go.mod h1:Srm0xFNRZ1Y+vCxJclo5qzx8aj+1pAKda/YfFPrG0dQ= github.com/go-openapi/swag/typeutils v0.27.3 h1:l6SSrx5eR5/WVwrGNzN6bQ9WqL04mrxNBl9YgQ3rcJ4= github.com/go-openapi/swag/typeutils v0.27.3/go.mod h1:Srm0xFNRZ1Y+vCxJclo5qzx8aj+1pAKda/YfFPrG0dQ= -github.com/go-openapi/swag/yamlutils v0.26.1 h1:0TSLK+lXs9vfIhAWzBeI/lOzEnIoot6WTCO1aAeWFTk= -github.com/go-openapi/swag/yamlutils v0.26.1/go.mod h1:7W5b7PRX9MxwL7TjeG7H8HkyBGRsIDRObhyMWFgBI2M= github.com/go-openapi/swag/yamlutils v0.27.3 h1:cRFCAoYtslYn9L9T0xWryHy1t7c1MACC+DMj3CLvwvs= github.com/go-openapi/swag/yamlutils v0.27.3/go.mod h1:6JYBGj8sw/NawMllyZY+cTA8Mzk2etS3ZBASdcyPsiU= -github.com/go-openapi/testify/enable/yaml/v2 v2.5.1 h1:q9NtHwK4qHF7yZziBPvZyv7zWAIk8ok88Gh2mR6Jpc8= -github.com/go-openapi/testify/enable/yaml/v2 v2.5.1/go.mod h1:JW0MXIotCYps/XsgJnG3a8Q7rE5xAiBwoOD5OfaIQBk= +github.com/go-openapi/testify/enable/yaml/v2 v2.6.0 h1:gGHwAJ0R/5jU8BEGDbfRNR3hL68dAVi84WuOApp29B0= +github.com/go-openapi/testify/enable/yaml/v2 v2.6.0/go.mod h1:tY+St1SGq4NFl0QIqdTY4aEdbChAHxhyB77XQi9iJCo= github.com/go-openapi/testify/v2 v2.6.0 h1:5PKH2HE7YJ/LuRPQGvSxBRlFXNQhSetBLlGAgUEu3ug= github.com/go-openapi/testify/v2 v2.6.0/go.mod h1:SgsVHtfooshd0tublTtJ50FPKhujf47YRqauXXOUxfw= -github.com/go-openapi/validate v0.26.0 h1:dxWzQ3F+vb1SajqUxHjwb5T4mTpSHmdrtv5Bi7+ZNhw= -github.com/go-openapi/validate v0.26.0/go.mod h1:b4o00uq7fJeJA+wWhVFCJpKTctzeFwzZImGGmHsl2JA= github.com/go-openapi/validate v0.26.1 h1:pZSbvtRO8G2R2FpWTYRn3w8LrsNwbtaVhP2dWiBa0Us= github.com/go-openapi/validate v0.26.1/go.mod h1:B8UMgXiQiwwQWIbmuROlwJZDPGlikPuh7iHV1vPX9Oo= github.com/go-rod/rod v0.116.2 h1:A5t2Ky2A+5eD/ZJQr1EfsQSe5rms5Xof/qj296e+ZqA= @@ -308,8 +264,7 @@ github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8= github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU= github.com/google/go-containerregistry v0.21.7 h1:/vPFuVXDjtFREsVArW+0h1CIl5urnOhzei4X2DMW9IU= github.com/google/go-containerregistry v0.21.7/go.mod h1:kjSbt7/zMsKLWfnHrIvKvhXHUw91jbe9DNjPPJ32gXE= -github.com/google/go-github/v89 v89.0.0 h1:35bEK5XoEcF3PZrlVbl9XN63f5BcJRA/UGkxeC9xPg0= -github.com/google/go-github/v89 v89.0.0/go.mod h1:QLcbU0ipeAqQuR5KSg8c2lql4Qk1EwJ2dWz/0rP4Nho= +github.com/google/go-github/v91 v91.0.0 h1:fpulREh37uBvOj4kF0vLuzjwJ1HHmFcAfquNjJfmpYs= github.com/google/go-github/v91 v91.0.0/go.mod h1:rHtn7haKvmkTLhUK/aCQypiIj/suWSB3rnS+a1FdH6M= github.com/google/go-querystring v1.2.0 h1:yhqkPbu2/OH+V9BfpCVPZkNmUXhb2gBxJArfhIxNtP0= github.com/google/go-querystring v1.2.0/go.mod h1:8IFJqpSRITyJ8QhQ13bmbeMBDfmeEJZD5A0egEOmkqU= @@ -369,8 +324,6 @@ github.com/jellydator/ttlcache/v3 v3.4.0 h1:YS4P125qQS0tNhtL6aeYkheEaB/m8HCqdMMP github.com/jellydator/ttlcache/v3 v3.4.0/go.mod h1:Hw9EgjymziQD3yGsQdf1FqFdpp7YjFMd4Srg5EJlgD4= github.com/kevinburke/ssh_config v1.2.0 h1:x584FjTGwHzMwvHx18PXxbBVzfnxogHaAReU4gf13a4= github.com/kevinburke/ssh_config v1.2.0/go.mod h1:CT57kijsi8u/K/BOFA39wgDQJ9CxiF4nAY/ojJ6r6mM= -github.com/klauspost/compress v1.18.6 h1:2jupLlAwFm95+YDR+NwD2MEfFO9d4z4Prjl1XXDjuao= -github.com/klauspost/compress v1.18.6/go.mod h1:cwPg85FWrGar70rWktvGQj8/hthj3wpl0PGDogxkrSQ= github.com/klauspost/compress v1.19.0 h1:sXLILfc9jV2QYWkzFOPWStmcUVH2RHEB1JCdY2oVvCQ= github.com/klauspost/compress v1.19.0/go.mod h1:cwPg85FWrGar70rWktvGQj8/hthj3wpl0PGDogxkrSQ= github.com/klauspost/cpuid/v2 v2.3.0 h1:S4CRMLnYUhGeDFDqkGriYKdfoFlDnMtqTiI/sFzhA9Y= @@ -398,8 +351,6 @@ github.com/lestrrat-go/jwx/v3 v3.1.1 h1:yd9AdPmZ4INnQ7k42IrzXYpnEG803+SrQ6hdMvzH github.com/lestrrat-go/jwx/v3 v3.1.1/go.mod h1:uw/MN2M/Xiu4FhwcIwH11Zsh9JWx9SWzgALl7/uIEkU= github.com/lestrrat-go/option/v2 v2.0.0 h1:XxrcaJESE1fokHy3FpaQ/cXW8ZsIdWcdFzzLOcID3Ss= github.com/lestrrat-go/option/v2 v2.0.0/go.mod h1:oSySsmzMoR0iRzCDCaUfsCzxQHUEuhOViQObyy7S6Vg= -github.com/letsencrypt/boulder v0.20260309.0 h1:kZynrxK3QfqLGx6hhoz+Rfs3hgltJs1p9Mp+4+VwnY0= -github.com/letsencrypt/boulder v0.20260309.0/go.mod h1:yG8lj8pNPZ8taq3oNdTpfBS+eC74IaEuiewqzVpXiWE= github.com/lucasb-eyer/go-colorful v1.3.0 h1:2/yBRLdWBZKrf7gB40FoiKfAWYQ0lqNcbuQwVHXptag= github.com/lucasb-eyer/go-colorful v1.3.0/go.mod h1:R4dSotOR9KMtayYi1e77YzuveK+i7ruzyGqttikkLy0= github.com/mattn/go-colorable v0.1.14 h1:9A9LHSqF/7dyVVX6g0U9cwm9pG3kP9gSzcuIPHPsaIE= @@ -428,8 +379,6 @@ github.com/oklog/ulid/v2 v2.1.1 h1:suPZ4ARWLOJLegGFiZZ1dFAkqzhMjL3J1TzI+5wHz8s= github.com/oklog/ulid/v2 v2.1.1/go.mod h1:rcEKHmBBKfef9DhnvX7y1HZBYxjXb0cP5ExxNsTT1QQ= github.com/onsi/gomega v1.34.1 h1:EUMJIKUjM8sKjYbtxQI9A4z2o+rruxnzNvpknOXie6k= github.com/onsi/gomega v1.34.1/go.mod h1:kU1QgUvBDLXBJq618Xvm2LUX6rSAfRaFRTcdOeDLwwY= -github.com/open-policy-agent/opa v1.18.2 h1:VBiLJpioTuk7XTW1JoQi4ILo+FVxD2/8uD8iP9/OcxY= -github.com/open-policy-agent/opa v1.18.2/go.mod h1:9GY+hER4ZEXtxPlMjftVbqJJY9xLtCD3Q0oufRCfAKo= github.com/open-policy-agent/opa v1.19.0 h1:+j2OCsjMezZEML2T1lI9giJdGJS/PL1XFKgkHPGIhpo= github.com/open-policy-agent/opa v1.19.0/go.mod h1:pb6Y6klyf7X7X8uXNDflruA9dQC2gMqWROXI5w/kvv0= github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U= @@ -448,14 +397,14 @@ github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINE github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U= github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= -github.com/prometheus/client_golang v1.23.2 h1:Je96obch5RDVy3FDMndoUsjAhG5Edi49h0RJWRi/o0o= -github.com/prometheus/client_golang v1.23.2/go.mod h1:Tb1a6LWHB3/SPIzCoaDXI4I8UHKeFTEQ1YCr+0Gyqmg= +github.com/prometheus/client_golang v1.24.0 h1:5XStIklKuAtJSNpdD3s8XJj/Yv78IQmE1kbNk87JrAI= +github.com/prometheus/client_golang v1.24.0/go.mod h1:QcsNdotprC2nS4BTM2ucbcqxd2CeXTEa9jW7zHO9iDE= github.com/prometheus/client_model v0.6.2 h1:oBsgwpGs7iVziMvrGhE53c/GrLUsZdHnqNwqPLxwZyk= github.com/prometheus/client_model v0.6.2/go.mod h1:y3m2F6Gdpfy6Ut/GBsUqTWZqCUvMVzSfMLjcu6wAwpE= -github.com/prometheus/common v0.67.5 h1:pIgK94WWlQt1WLwAC5j2ynLaBRDiinoAb86HZHTUGI4= -github.com/prometheus/common v0.67.5/go.mod h1:SjE/0MzDEEAyrdr5Gqc6G+sXI67maCxzaT3A2+HqjUw= -github.com/prometheus/procfs v0.20.1 h1:XwbrGOIplXW/AU3YhIhLODXMJYyC1isLFfYCsTEycfc= -github.com/prometheus/procfs v0.20.1/go.mod h1:o9EMBZGRyvDrSPH1RqdxhojkuXstoe4UlK79eF5TGGo= +github.com/prometheus/common v0.70.0 h1:bcpru3tWPVnxGnETLgOV5jbp/JRXgYEyv65CuBLAMMI= +github.com/prometheus/common v0.70.0/go.mod h1:S/SFasQmgGiYH6C81LKCtYa8QACgthGg5zxL2udV7SY= +github.com/prometheus/procfs v0.21.1 h1:GljZCt+zSTS+NZq88cyQ1LjZ+RCHp3uVuabBWA5+OJI= +github.com/prometheus/procfs v0.21.1/go.mod h1:aB55Cww9pdSJVHk0hUf0inxWyyjPogFIjmHKYgMKmtY= github.com/rcrowley/go-metrics v0.0.0-20250401214520-65e299d6c5c9 h1:bsUq1dX0N8AOIL7EB/X911+m4EHsnWEHeJ0c+3TTBrg= github.com/rcrowley/go-metrics v0.0.0-20250401214520-65e299d6c5c9/go.mod h1:bCqnVzQkZxMG4s8nGwiZ5l3QUCyqpo9Y+/ZMZ9VjZe4= github.com/rivo/uniseg v0.4.7 h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ= @@ -479,8 +428,6 @@ github.com/sergi/go-diff v1.4.0 h1:n/SP9D5ad1fORl+llWyN+D6qoUETXNZARKjyY2/KVCw= github.com/sergi/go-diff v1.4.0/go.mod h1:A0bzQcvG0E7Rwjx0REVgAGH58e96+X0MeOfepqsbeW4= github.com/shibumi/go-pathspec v1.3.0 h1:QUyMZhFo0Md5B8zV8x2tesohbb5kfbpTi9rBnKh5dkI= github.com/shibumi/go-pathspec v1.3.0/go.mod h1:Xutfslp817l2I1cZvgcfeMQJG5QnU2lh5tVaaMCl3jE= -github.com/sigstore/cosign/v3 v3.1.2 h1:AlWkztipzFHLGfLECkUwcC2a2EbpzKOsElge1vcRNcs= -github.com/sigstore/cosign/v3 v3.1.2/go.mod h1:BuXM5YXK96YuSih+9h1aMDgwdJDaZO9/8ZaPo/mUcr4= github.com/sigstore/cosign/v3 v3.1.3 h1:001JQRI/PJ/5T+g/kJ1KTvKFbb322+fomc+pHDZ/6sg= github.com/sigstore/cosign/v3 v3.1.3/go.mod h1:DmjtYkWDMdbG26X+QSOPB6QQGkLjRjQCIxxNs6wV6bA= github.com/sigstore/protobuf-specs v0.5.1 h1:/5OPaNuolRJmQfeZLayJGFXMpsRJEdgC6ah1/+7Px7U= @@ -489,12 +436,8 @@ github.com/sigstore/rekor v1.5.3 h1:0Tyolw3zreRgm7PUW8dccFLXGBThi08278jI8EXNSr4= github.com/sigstore/rekor v1.5.3/go.mod h1:h3GK5dDqCcWJJZUJwdpKGSSmEV2GEjPUjJy3WTjBwzA= github.com/sigstore/rekor-tiles/v2 v2.3.0 h1:HhMgH61UP0t899V8Fjt7pz1YdgOBptbaQdnCF+79cdc= github.com/sigstore/rekor-tiles/v2 v2.3.0/go.mod h1:DEFiKSyQ4nF75QRVNdOPaIH3cmvMkO2B6xDZjNYngPc= -github.com/sigstore/sigstore v1.10.8 h1:1Mgkxvkw4AXMfIP1DOjc6kw0GkUgA8pGVpveN/EfOq4= -github.com/sigstore/sigstore v1.10.8/go.mod h1:f9+B/4iaYimvUkySyb2mvc73n3RLqNn24grHZM/ET8M= github.com/sigstore/sigstore v1.10.9 h1:7Dcpt+ibnltHQZ8XhaU0dFmhHaf/T491eJfA9WDex4Y= github.com/sigstore/sigstore v1.10.9/go.mod h1:LYW9+qH7bK8wZmLm6lPxIC5lkHtkJDCgkqjChzTAIBs= -github.com/sigstore/sigstore-go v1.2.2 h1:xAJ8hxaoecC0HKBYVbrwUjkeAI+GJYu6vLqbxDlD2Q0= -github.com/sigstore/sigstore-go v1.2.2/go.mod h1:MIFwBxAHJD+/lKgZzt9n/4Zhq/3T2+EuGX8iGrIsZgU= github.com/sigstore/sigstore-go v1.3.0 h1:hnIMHREyCNTYFtOE1o7ae3Axa9B5W5EjUSBJICP2NBE= github.com/sigstore/sigstore-go v1.3.0/go.mod h1:AyRQXfpH89py1twjE3kEZxlRersng90GSYqQV9zGJE8= github.com/sigstore/sigstore/pkg/signature/kms/aws v1.10.8 h1:tofVQ+UWJgad/69I5zbqxdFCN5gpIn9tRQP7iBzIpBw= @@ -505,8 +448,6 @@ github.com/sigstore/sigstore/pkg/signature/kms/gcp v1.10.8 h1:MxpAIMZVzn0Tpbarc9 github.com/sigstore/sigstore/pkg/signature/kms/gcp v1.10.8/go.mod h1:bnAUEkFNam6STvkVZhptVwWzWR5pS24CEtQ+lhxu7S0= github.com/sigstore/sigstore/pkg/signature/kms/hashivault v1.10.8 h1:1DGe4/clcdOnkz5MINEczWlmEvjUtZd+AjPPT/cBhQ8= github.com/sigstore/sigstore/pkg/signature/kms/hashivault v1.10.8/go.mod h1:6IDFhpgxtzqbnzrFkyegbj7RfWwKeRrb3/+xAD1Wp+Y= -github.com/sigstore/timestamp-authority/v2 v2.1.2 h1:7DDhnknLL4w8VwomyvW2W8qblOS9LDR8oihna+jc7Ls= -github.com/sigstore/timestamp-authority/v2 v2.1.2/go.mod h1:o6rAVZceFyejClIj/uStRNIemP16bVMZtbMmhk6pr0U= github.com/sigstore/timestamp-authority/v2 v2.1.3 h1:Fc+LjCTfik1lh3YLkaosENfkXa3R2Y1nswiUKutBdFA= github.com/sigstore/timestamp-authority/v2 v2.1.3/go.mod h1:myoFOKJB/u5vNTFwvBBJVkG3NnOBeIJevbfjNeasLjo= github.com/sirupsen/logrus v1.7.0/go.mod h1:yWOB1SBYBC5VeMP7gHvWumXLIWorT60ONWic61uBYv0= @@ -538,6 +479,8 @@ github.com/subosito/gotenv v1.6.0 h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8 github.com/subosito/gotenv v1.6.0/go.mod h1:Dk4QP5c2W3ibzajGcXpNraDfq2IrhjMIvMSWPKKo0FU= github.com/tchap/go-patricia/v2 v2.3.3 h1:xfNEsODumaEcCcY3gI0hYPZ/PcpVv5ju6RMAhgwZDDc= github.com/tchap/go-patricia/v2 v2.3.3/go.mod h1:VZRHKAb53DLaG+nA9EaYYiaEx6YztwDlLElMsnSHD4k= +github.com/tetratelabs/wazero v1.12.0 h1:DuWcpNu/FzgEXgGBDp8J1Spc+CWOvvtvVyjKlaZopYU= +github.com/tetratelabs/wazero v1.12.0/go.mod h1:LvKtzl2RqO4gyF27BiXU+nKAjcV8f38U+kP/q2vgxh0= github.com/theupdateframework/go-tuf v0.7.0 h1:CqbQFrWo1ae3/I0UCblSbczevCCbS31Qvs5LdxRWqRI= github.com/theupdateframework/go-tuf v0.7.0/go.mod h1:uEB7WSY+7ZIugK6R1hiBMBjQftaFzn7ZCDJcp1tCUug= github.com/theupdateframework/go-tuf/v2 v2.4.2 h1:w7976/W8uTwlsegP5nRymlpjPgrwSh+AXUf85is6nJk= @@ -546,22 +489,18 @@ github.com/thlib/go-timezone-local v0.0.0-20210907160436-ef149e42d28e h1:Buzhfgf github.com/thlib/go-timezone-local v0.0.0-20210907160436-ef149e42d28e/go.mod h1:/Tnicc6m/lsJE0irFMA0LfIwTBo4QP7A8IfyIv4zZKI= github.com/tink-crypto/tink-go-awskms/v3 v3.0.0 h1:XSohRhCkXAVI0iaCnWB/GS05TEmpnKurQmzaY1jzt3Y= github.com/tink-crypto/tink-go-awskms/v3 v3.0.0/go.mod h1:+7MXsShLzVbSQ6dI0Pe4JuZM52jD1jQ1itAygd/MDsA= -github.com/tink-crypto/tink-go-gcpkms/v2 v2.2.0 h1:3B9i6XBXNTRspfkTC0asN5W0K6GhOSgcujNiECNRNb0= -github.com/tink-crypto/tink-go-gcpkms/v2 v2.2.0/go.mod h1:jY5YN2BqD/KSCHM9SqZPIpJNG/u3zwfLXHgws4x2IRw= +github.com/tink-crypto/tink-go-gcpkms/v2 v2.3.0 h1:3s6YMgMOBZRU8qG6ybpKSF2Sau+y3sMvxR911M59SwA= +github.com/tink-crypto/tink-go-gcpkms/v2 v2.3.0/go.mod h1:X8UNvbQu2wanAGa8ixRUU/DWt1V2hUBfvPGy6s9nE2s= github.com/tink-crypto/tink-go-hcvault/v2 v2.5.0 h1:eXuNqgrcYelxU1MVikOJDP3wTS5lvihM4ntoAbAMfvs= github.com/tink-crypto/tink-go-hcvault/v2 v2.5.0/go.mod h1:3RhcxAqek6xUlRFmJifvU4CYLZN60KMQdIKqpZAZJG0= -github.com/tink-crypto/tink-go/v2 v2.6.0 h1:+KHNBHhWH33Vn+igZWcsgdEPUxKwBMEe0QC60t388v4= -github.com/tink-crypto/tink-go/v2 v2.6.0/go.mod h1:2WbBA6pfNsAfBwDCggboaHeB2X29wkU8XHtGwh2YIk8= -github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399 h1:e/5i7d4oYZ+C1wj2THlRK+oAhjeS/TRQwMfkIuet3w0= -github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399/go.mod h1:LdwHTNJT99C5fTAzDz0ud328OgXz+gierycbcIx2fRs= +github.com/tink-crypto/tink-go/v2 v2.7.0 h1:k7QnUXJ1cRDpvoy/5l1FimZqMAArRff8vjUqzi5N04o= +github.com/tink-crypto/tink-go/v2 v2.7.0/go.mod h1:cWNpQ/yAT/QHzAV0kBGMOSJzzYTKofDZdJaUqOPPWCI= github.com/transparency-dev/formats v0.1.1 h1:4bVHJc+KdBgpA1OJD1yjI+g0i5Z1graCppTMH8lWKJI= github.com/transparency-dev/formats v0.1.1/go.mod h1:qtZ8goRuJ8FTBG9c9+Bj0rn2rUG7eG/AUTkr+Aw3jFw= github.com/transparency-dev/merkle v0.0.2 h1:Q9nBoQcZcgPamMkGn7ghV8XiTZ/kRxn1yCG81+twTK4= github.com/transparency-dev/merkle v0.0.2/go.mod h1:pqSy+OXefQ1EDUVmAJ8MUhHB9TXGuzVAT58PqBoHz1A= github.com/valyala/fastjson v1.6.10 h1:/yjJg8jaVQdYR3arGxPE2X5z89xrlhS0eGXdv+ADTh4= github.com/valyala/fastjson v1.6.10/go.mod h1:e6FubmQouUNP73jtMLmcbxS6ydWIpOfhz34TSfO3JaE= -github.com/vektah/gqlparser/v2 v2.5.34 h1:MEea5P0qhdcqfBL45ghKE+qr9laidVHTMHjav5h7ckk= -github.com/vektah/gqlparser/v2 v2.5.34/go.mod h1:mFdHLGCio7OGX1fby9ZjTW6FN+qxgmbnBcRIeeScE5s= github.com/vektah/gqlparser/v2 v2.5.36 h1:CN9mKVHgMkc+XftdOWIhb4HEL8wKSYkFAqhf8booa7s= github.com/vektah/gqlparser/v2 v2.5.36/go.mod h1:cAJ9qwVgPaUkWv6Gn8vn0mqOE0Ui5Pn56wNy5396XWo= github.com/xanzy/ssh-agent v0.3.3 h1:+/15pJfg/RsTxqYcX6fHqOXZwwMP+2VyYWJeWM2qQFM= @@ -579,12 +518,12 @@ github.com/yashtewari/glob-intersection v0.2.0 h1:8iuHdN88yYuCzCdjt0gDe+6bAhUwBe github.com/yashtewari/glob-intersection v0.2.0/go.mod h1:LK7pIC3piUjovexikBbJ26Yml7g8xa5bsjfx2v1fwok= github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78 h1:ilQV1hzziu+LLM3zUTJ0trRztfwgjqKnBWNtSRkbmwM= github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78/go.mod h1:aL8wCCfTfSfmXjznFBSZNN13rSJjlIOI1fUNAtF7rmI= -github.com/ysmood/fetchup v0.2.3 h1:ulX+SonA0Vma5zUFXtv52Kzip/xe7aj4vqT5AJwQ+ZQ= -github.com/ysmood/fetchup v0.2.3/go.mod h1:xhibcRKziSvol0H1/pj33dnKrYyI2ebIvz5cOOkYGns= +github.com/ysmood/fetchup v0.3.0 h1:UhYz9xnLEVn2ukSuK3KCgcznWpHMdrmbsPpllcylyu8= +github.com/ysmood/fetchup v0.3.0/go.mod h1:hbysoq65PXL0NQeNzUczNYIKpwpkwFL4LXMDEvIQq9A= github.com/ysmood/goob v0.4.0 h1:HsxXhyLBeGzWXnqVKtmT9qM7EuVs/XOgkX7T6r1o1AQ= github.com/ysmood/goob v0.4.0/go.mod h1:u6yx7ZhS4Exf2MwciFr6nIM8knHQIE22lFpWHnfql18= -github.com/ysmood/got v0.40.0 h1:ZQk1B55zIvS7zflRrkGfPDrPG3d7+JOza1ZkNxcc74Q= -github.com/ysmood/got v0.40.0/go.mod h1:W7DdpuX6skL3NszLmAsC5hT7JAhuLZhByVzHTq874Qg= +github.com/ysmood/got v0.42.0 h1:CMRoknemO2nkZBpZmRgsWs79UoQz5eDfWmKIAGGFm94= +github.com/ysmood/got v0.42.0/go.mod h1:uFF8sPWgVvWIGrjASUgtH0AbnU7ipaXGVaFtWdl3yP0= github.com/ysmood/gson v0.7.3 h1:QFkWbTH8MxyUTKPkVWAENJhxqdBa4lYTQWqZCiLG6kE= github.com/ysmood/gson v0.7.3/go.mod h1:3Kzs5zDl21g5F/BlLTNcuAGAYLKt2lV5G8D1zF3RNmg= github.com/ysmood/leakless v0.9.0 h1:qxCG5VirSBvmi3uynXFkcnLMzkphdh3xx5FtrORwDCU= @@ -620,21 +559,13 @@ go.yaml.in/yaml/v2 v2.4.4/go.mod h1:gMZqIpDtDqOfM0uNfy0SkpRhvUryYH0Z6wdMYcacYXQ= go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc= go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg= golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4= -golang.org/x/crypto v0.54.0 h1:YLIA59K4fiNzHzjnZt2tUJQjQtUWfWbeHBqKtk3eScw= -golang.org/x/crypto v0.54.0/go.mod h1:KWL8ny2AZdGR2cWmzeHrp2azQPGogOv+HeQaVEXC2dk= golang.org/x/crypto v0.56.0 h1:GUh5Ii4J5jtcseSMiRqr1jXCNHoxjeV9Fmekc2oLy6Y= golang.org/x/crypto v0.56.0/go.mod h1:OMW5y6CY9l38uPLmxU6l6pwcXp1obtLo3e6gT7gQR2I= golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f h1:W3F4c+6OLc6H2lb//N1q4WpJkhzJCK5J6kUi1NTVXfM= golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f/go.mod h1:J1xhfL/vlindoeF/aINzNzt2Bket5bjo9sdOYzOsU80= -golang.org/x/mod v0.37.0 h1:vF1DjpVEshcIqoEaauuHebaLk1O1forxjxBaVn884JQ= -golang.org/x/mod v0.37.0/go.mod h1:m8S8VeM9r4dzDwjrKO0a1sZP3YjeMamRRlD+fmR2Q/0= -golang.org/x/mod v0.38.0 h1:MECBjubtXD7yj4HrhIUcywNaGeNVUdfVnxmPajOk4yk= -golang.org/x/mod v0.38.0/go.mod h1:V6Xz0pq8TQ3dGqVQ1FVHuelZpAL0uNhSkk9ogYP3c40= golang.org/x/mod v0.40.0 h1:hUv+3cXcdRHz08UmSiOob7sadHig73uo5bkXxQ/tvUs= golang.org/x/mod v0.40.0/go.mod h1:0/weTWkPWGBikyTWAX3dkjVztMmBA5hM0DH6BElSupE= golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y= -golang.org/x/net v0.57.0 h1:K5+3DljvIuDG9/Jv9rvyMywYNFCQ9RSUY6OOTTkT+tE= -golang.org/x/net v0.57.0/go.mod h1:KpXc8iv+r3XplLAG/f7Jsf9RPszJzdR0f58q9vGOuEU= golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To= golang.org/x/net v0.58.0/go.mod h1:YwCddHnFlT7eLQqVprV19OnhLGtc5xOKgE0RyqgfWAU= golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs= @@ -655,37 +586,25 @@ golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9sn golang.org/x/term v0.45.0 h1:NwWyBmoJCbfTHpxrWoZ9C6/VxOf7ic219I8xZZFdrf0= golang.org/x/term v0.45.0/go.mod h1:9aqxs0blBcrm/n0L9QW0aRVD+ktan8ssZromtqJC43w= golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= -golang.org/x/text v0.40.0 h1:Ub2Z6/xjgF1WrYQz2nuITOEegKFtiIy+rieRJ5lHZKs= -golang.org/x/text v0.40.0/go.mod h1:hpnzDAfGV753zIKo+wk3u1bVKCGPbrnF7+7LBF/UHVY= golang.org/x/text v0.41.0 h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8= golang.org/x/text v0.41.0/go.mod h1:jvf1O8ajNzZqhSrQBPbutR/EB83Cc0CFrezNQIwbb5M= golang.org/x/time v0.15.0 h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U= golang.org/x/time v0.15.0/go.mod h1:Y4YMaQmXwGQZoFaVFk4YpCt4FLQMYKZe9oeV/f4MSno= golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= -golang.org/x/tools v0.47.0 h1:7Kn5x/d1svx/PzryTsqeoZN4TZwqeH5pGWjefhLi/1Q= -golang.org/x/tools v0.47.0/go.mod h1:dFHnyTvFWY212G+h7ZY4Vsp/K3U4/7W9TyVaAul8uCA= +golang.org/x/tools v0.49.0 h1:3NI7VXzL9+1WZD52Dx2ttoPwD5DWrFGpl9mFZDlmisI= +golang.org/x/tools v0.49.0/go.mod h1:SJNXV9DBKT0UbdttsQjbfJlAE/q+y36++zo3uL3N0Oo= gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4= gonum.org/v1/gonum v0.17.0/go.mod h1:El3tOrEuMpv2UdMrbNlKEh9vd86bmQ6vqIcDwxEOc1E= google.golang.org/api v0.284.0 h1:i+cKTgeQRcRySkP7QTl5PDO7/pAm8EcMFIUMlNbk4Vc= google.golang.org/api v0.284.0/go.mod h1:AU44fU+XVZOCcd8uLaBIa/ZgzgPf/0qqY3+m7lQaado= google.golang.org/genproto v0.0.0-20260406210006-6f92a3bedf2d h1:N1Ec54vZnIPd7MnxRiYLW+oY4fDR4BOS/LrssdD9+ek= google.golang.org/genproto v0.0.0-20260406210006-6f92a3bedf2d/go.mod h1:c2hJ1grtnH0xUiEKGDGkjGNTJ1Hy2LrblyKOHF0sqRM= -google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa h1:Kjn0N0tCrDgiAFW+lGO4JZ3ck44CehvJQMAwj9QF0G8= -google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa/go.mod h1:q4lMZS6kskjT5HvCPrnnypcDPVJqT/f4nfxmkE7gryY= google.golang.org/genproto/googleapis/api v0.0.0-20260727163830-6c54dddc4772 h1:4namukbyF7JY83aWHQwi9J5ugNTnDReLJ9ZcpqOpRB4= google.golang.org/genproto/googleapis/api v0.0.0-20260727163830-6c54dddc4772/go.mod h1:1brfde68Npq6+WA75c1EHWPijZEG1kMus61ygPZfn4A= -google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa h1:mZHHdPZl0dbGHCflZgAq/Q468DWVFcU2whhB2KAo8fk= -google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8= google.golang.org/genproto/googleapis/rpc v0.0.0-20260720155508-bb71a54f79dc h1:3TtNq/QbJNrSY1nVdjcikfBw6ujnaNbdrd88wNr1OW4= google.golang.org/genproto/googleapis/rpc v0.0.0-20260720155508-bb71a54f79dc/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8= -google.golang.org/grpc v1.82.1 h1:NnAxzGRA0677vCa4BUkOAnO5+FfQqVl9iUXeD0IqcGE= -google.golang.org/grpc v1.82.1/go.mod h1:yzTZ1TB1Z3SG+LIYaI+WiE8D5+PZ3ArnrSp8zF3+/ZA= -google.golang.org/grpc v1.83.1 h1:HIO0+BEtBP6soyqvqC8sNUjZ7bTs+0hFQuFF+RAy++Y= -google.golang.org/grpc v1.83.1/go.mod h1:kDyl6SKsiHKt0uylY5gtn5cEjkrIOhQOGDgIc4JGwzQ= google.golang.org/grpc v1.83.2 h1:EManeRomTObA0BU7I8vXgg/78uE5MJ9M8B39EX2WscU= google.golang.org/grpc v1.83.2/go.mod h1:YPI1hK3kDked6iHvgX3tR0y+nX/qpMFKhPgFsokw1S8= -google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af h1:+5/Sw3GsDNlEmu7TfklWKPdQ0Ykja5VEmq2i817+jbI= -google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco= google.golang.org/protobuf v1.36.12 h1:pJOKDDOyeXErUroCihFAd5LQuwXBSpVnKGrj5o/fwxc= google.golang.org/protobuf v1.36.12/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= diff --git a/pkg/attestations/attestations.go b/pkg/attestations/attestations.go index ff5f8d9..e4c9160 100644 --- a/pkg/attestations/attestations.go +++ b/pkg/attestations/attestations.go @@ -20,7 +20,7 @@ import ( "strings" "time" - "github.com/google/go-github/v89/github" + "github.com/google/go-github/v91/github" bundleutils "github.com/liatrio/autogov/pkg/bundle" "github.com/liatrio/autogov/pkg/certid" "github.com/liatrio/autogov/pkg/digest" diff --git a/pkg/attestations/attestations_example_test.go b/pkg/attestations/attestations_example_test.go index 44e7341..9218b0e 100644 --- a/pkg/attestations/attestations_example_test.go +++ b/pkg/attestations/attestations_example_test.go @@ -4,7 +4,7 @@ import ( "context" "fmt" - "github.com/google/go-github/v89/github" + "github.com/google/go-github/v91/github" ) // ExampleGetFromGitHub shows verifying GitHub attestations with sigstore-go (trusted diff --git a/pkg/attestations/attestations_test.go b/pkg/attestations/attestations_test.go index 6d8b286..1aafff0 100644 --- a/pkg/attestations/attestations_test.go +++ b/pkg/attestations/attestations_test.go @@ -14,7 +14,7 @@ import ( "testing" "time" - "github.com/google/go-github/v89/github" + "github.com/google/go-github/v91/github" "github.com/liatrio/autogov/pkg/certid" "github.com/liatrio/autogov/pkg/root" ) diff --git a/pkg/download/download.go b/pkg/download/download.go index e3c7ebf..57c3f0f 100644 --- a/pkg/download/download.go +++ b/pkg/download/download.go @@ -8,7 +8,7 @@ import ( "path/filepath" "strings" - "github.com/google/go-github/v89/github" + "github.com/google/go-github/v91/github" "github.com/liatrio/autogov/pkg/attestations" "github.com/liatrio/autogov/pkg/digest" ghclient "github.com/liatrio/autogov/pkg/github" diff --git a/pkg/download/download_test.go b/pkg/download/download_test.go index 3104657..d781148 100644 --- a/pkg/download/download_test.go +++ b/pkg/download/download_test.go @@ -10,7 +10,7 @@ import ( "strings" "testing" - "github.com/google/go-github/v89/github" + "github.com/google/go-github/v91/github" "github.com/spf13/cobra" ) diff --git a/pkg/github/client.go b/pkg/github/client.go index 88d2ac8..d8e5f03 100644 --- a/pkg/github/client.go +++ b/pkg/github/client.go @@ -3,7 +3,7 @@ package github import ( "os" - "github.com/google/go-github/v89/github" + "github.com/google/go-github/v91/github" "github.com/spf13/viper" ) diff --git a/pkg/orchestrate/verify.go b/pkg/orchestrate/verify.go index 3c913f9..1a49ffb 100644 --- a/pkg/orchestrate/verify.go +++ b/pkg/orchestrate/verify.go @@ -6,7 +6,7 @@ import ( "fmt" "path/filepath" - "github.com/google/go-github/v89/github" + "github.com/google/go-github/v91/github" "github.com/liatrio/autogov/pkg/attestations" "github.com/liatrio/autogov/pkg/certid" "github.com/sigstore/cosign/v3/pkg/oci" diff --git a/pkg/orchestrate/verify_test.go b/pkg/orchestrate/verify_test.go index 5943b17..692784b 100644 --- a/pkg/orchestrate/verify_test.go +++ b/pkg/orchestrate/verify_test.go @@ -6,7 +6,7 @@ import ( "path/filepath" "testing" - "github.com/google/go-github/v89/github" + "github.com/google/go-github/v91/github" "github.com/liatrio/autogov/pkg/certid" "github.com/stretchr/testify/assert" ) diff --git a/pkg/policy/ghrelease.go b/pkg/policy/ghrelease.go index aad61d6..507cddc 100644 --- a/pkg/policy/ghrelease.go +++ b/pkg/policy/ghrelease.go @@ -12,7 +12,7 @@ import ( "strings" "time" - gogithub "github.com/google/go-github/v89/github" + gogithub "github.com/google/go-github/v91/github" "github.com/liatrio/autogov/pkg/digest" "github.com/liatrio/autogov/pkg/github" diff --git a/pkg/policy/ghrelease_test.go b/pkg/policy/ghrelease_test.go index ab49651..f2fe591 100644 --- a/pkg/policy/ghrelease_test.go +++ b/pkg/policy/ghrelease_test.go @@ -14,7 +14,7 @@ import ( "testing" "time" - gogithub "github.com/google/go-github/v89/github" + gogithub "github.com/google/go-github/v91/github" "github.com/liatrio/autogov/pkg/digest" ) @@ -84,7 +84,7 @@ func (f *fakeGHReleaseClient) DownloadReleaseAsset(ctx context.Context, owner, r func makeRelease(tag string, assets map[string]int64) *gogithub.RepositoryRelease { r := &gogithub.RepositoryRelease{TagName: tag} for name, id := range assets { - r.Assets = append(r.Assets, &gogithub.ReleaseAsset{ID: gogithub.Ptr(id), Name: gogithub.Ptr(name)}) + r.Assets = append(r.Assets, &gogithub.ReleaseAsset{ID: new(id), Name: new(name)}) } return r } diff --git a/pkg/predicate/config.go b/pkg/predicate/config.go index 98eae64..442166e 100644 --- a/pkg/predicate/config.go +++ b/pkg/predicate/config.go @@ -7,7 +7,7 @@ import ( "fmt" "os" - "github.com/google/go-github/v89/github" + "github.com/google/go-github/v91/github" "github.com/xeipuuv/gojsonschema" ) diff --git a/pkg/predicate/source_review_service.go b/pkg/predicate/source_review_service.go index abd4daf..ac5bc68 100644 --- a/pkg/predicate/source_review_service.go +++ b/pkg/predicate/source_review_service.go @@ -8,7 +8,7 @@ import ( "strconv" "time" - gh "github.com/google/go-github/v89/github" + gh "github.com/google/go-github/v91/github" ) // ReviewService abstracts the GitHub REST calls the source-review predicate diff --git a/pkg/predicate/source_review_service_test.go b/pkg/predicate/source_review_service_test.go index 67f9bb3..23bcf3f 100644 --- a/pkg/predicate/source_review_service_test.go +++ b/pkg/predicate/source_review_service_test.go @@ -4,7 +4,7 @@ import ( "net/http" "testing" - gh "github.com/google/go-github/v89/github" + gh "github.com/google/go-github/v91/github" ) func TestAddPage(t *testing.T) { diff --git a/pkg/predicate/sourcereview.go b/pkg/predicate/sourcereview.go index f163f04..a216281 100644 --- a/pkg/predicate/sourcereview.go +++ b/pkg/predicate/sourcereview.go @@ -8,7 +8,7 @@ import ( "strings" "time" - gh "github.com/google/go-github/v89/github" + gh "github.com/google/go-github/v91/github" ghclient "github.com/liatrio/autogov/pkg/github" ) diff --git a/pkg/predicate/sourcereview_test.go b/pkg/predicate/sourcereview_test.go index 73b8e1d..534de4f 100644 --- a/pkg/predicate/sourcereview_test.go +++ b/pkg/predicate/sourcereview_test.go @@ -12,7 +12,7 @@ import ( "testing" "time" - gh "github.com/google/go-github/v89/github" + gh "github.com/google/go-github/v91/github" "github.com/liatrio/autogov/pkg/attestations" ) @@ -189,7 +189,7 @@ func (m *mockReviewService) GetRepository(_ context.Context, _, _ string) (*gh.R if db == "" { db = "main" } - return &gh.Repository{DefaultBranch: gh.Ptr(db)}, srResp(), nil + return &gh.Repository{DefaultBranch: new(db)}, srResp(), nil } func (m *mockReviewService) GetPullRequest(_ context.Context, _, _ string, _ int) (*gh.PullRequest, *gh.Response, error) { @@ -200,7 +200,7 @@ func (m *mockReviewService) GetPullRequest(_ context.Context, _, _ string, _ int if m.getPRCallCount <= m.getPRFailAttempts { // simulate the propagation race: the PR resolves but merged_by hasn't // propagated on this attempt yet. - return &gh.PullRequest{Number: gh.Ptr(0)}, srResp(), nil + return &gh.PullRequest{Number: new(0)}, srResp(), nil } // nil getPR is the default: the best-effort caller tolerates a nil PR and simply // records no merger, so existing tests that never set getPR do not panic. @@ -208,31 +208,31 @@ func (m *mockReviewService) GetPullRequest(_ context.Context, _, _ string, _ int } func srUser(login string, id int64, typ string) *gh.User { - return &gh.User{Login: gh.Ptr(login), ID: gh.Ptr(id), Type: gh.Ptr(typ)} + return &gh.User{Login: new(login), ID: new(id), Type: new(typ)} } func srReview(u *gh.User, state, commitID string, at time.Time) *gh.PullRequestReview { return &gh.PullRequestReview{ - ID: gh.Ptr(at.UnixNano()), + ID: new(at.UnixNano()), User: u, - State: gh.Ptr(state), + State: new(state), SubmittedAt: &gh.Timestamp{Time: at}, - CommitID: gh.Ptr(commitID), - AuthorAssociation: gh.Ptr("MEMBER"), + CommitID: new(commitID), + AuthorAssociation: new("MEMBER"), //nolint:staticcheck // SA1019 concerns Events API; this fixture models the Reviews REST response, where author_association remains available. } } // srMergedPR builds the merged PR whose merge produced srSourceSHA. func srMergedPR() *gh.PullRequest { return &gh.PullRequest{ - Number: gh.Ptr(7), + Number: new(7), User: srUser("author", srAuthorID, "User"), - Head: &gh.PullRequestBranch{SHA: gh.Ptr(srHeadSHA)}, - Base: &gh.PullRequestBranch{Ref: gh.Ptr("main")}, - MergeCommitSHA: gh.Ptr(srSourceSHA), + Head: &gh.PullRequestBranch{SHA: new(srHeadSHA)}, + Base: &gh.PullRequestBranch{Ref: new("main")}, + MergeCommitSHA: new(srSourceSHA), MergedAt: &gh.Timestamp{Time: srBaseTime.Add(time.Hour)}, - HTMLURL: gh.Ptr("https://github.com/liatrio/autogov/pull/7"), - Title: gh.Ptr("a change"), + HTMLURL: new("https://github.com/liatrio/autogov/pull/7"), + Title: new("a change"), } } @@ -275,7 +275,7 @@ func srValidate(t *testing.T, c *SourceReview) { func srBypassActor(actorType string, id int64, mode string) *gh.BypassActor { at := gh.BypassActorType(actorType) bm := gh.BypassMode(mode) - return &gh.BypassActor{ActorID: gh.Ptr(id), ActorType: &at, BypassMode: &bm} + return &gh.BypassActor{ActorID: new(id), ActorType: &at, BypassMode: &bm} } func TestFetchTechnicalControls(t *testing.T) { @@ -505,7 +505,7 @@ var continuityCommitTime = continuityStart.Add(1000 * time.Hour) // srR0Commit is the single R0 commit returned by ListCommits in continuity tests. func srR0Commit() *gh.RepositoryCommit { return &gh.RepositoryCommit{ - SHA: gh.Ptr("r0commit00000000000000000000000000000000"), + SHA: new("r0commit00000000000000000000000000000000"), Commit: &gh.Commit{Committer: &gh.CommitAuthor{Date: &gh.Timestamp{Time: continuityCommitTime}}}, } } @@ -735,7 +735,7 @@ func TestContinuity_P9b_CommitWalkTruncated(t *testing.T) { // P9b: the commit list keeps advertising more pages past the cap -> fail closed. pages := make([][]*gh.RepositoryCommit, continuityMaxCommitPages+1) for i := range pages { - pages[i] = []*gh.RepositoryCommit{{SHA: gh.Ptr(fmt.Sprintf("c%039d", i))}} + pages[i] = []*gh.RepositoryCommit{{SHA: new(fmt.Sprintf("c%039d", i))}} } hist := []*RulesetVersion{srVersion(1, continuityStart)} states := map[int64]*RulesetVersionState{1: cleanL3State()} @@ -908,7 +908,7 @@ func TestContinuity_P17_CommitDateBeforeStartFailsClosed(t *testing.T) { states := map[int64]*RulesetVersionState{1: cleanL3State()} m := continuityMock(hist, states, &gh.RepositoryRuleset{}) m.commits = []*gh.RepositoryCommit{{ - SHA: gh.Ptr("tooold00000000000000000000000000000000aa"), + SHA: new("tooold00000000000000000000000000000000aa"), Commit: &gh.Commit{Committer: &gh.CommitAuthor{Date: &gh.Timestamp{Time: continuityStart.Add(-time.Hour)}}}, }} c := srBuildContinuity(t, m) @@ -1277,10 +1277,10 @@ func TestNewSourceReview_OnlyOpenPRs_QuirkIncomplete(t *testing.T) { // the ListPullRequestsWithCommit default-branch quirk returns only OPEN PRs // for a SHA not on the default branch -> incompleteness, NOT a false hard fail. open := &gh.PullRequest{ - Number: gh.Ptr(9), + Number: new(9), User: srUser("author", srAuthorID, "User"), - Head: &gh.PullRequestBranch{SHA: gh.Ptr(srHeadSHA)}, - Base: &gh.PullRequestBranch{Ref: gh.Ptr("main")}, + Head: &gh.PullRequestBranch{SHA: new(srHeadSHA)}, + Base: &gh.PullRequestBranch{Ref: new("main")}, // no MergedAt, no matching MergeCommitSHA -> not selected. } c := srBuild(t, &mockReviewService{prs: []*gh.PullRequest{open}}, srOpts()) @@ -1425,7 +1425,7 @@ func TestNewSourceReview_ApproversDeterministicOrder(t *testing.T) { func TestNewSourceReview_BoundsUntrustedStrings(t *testing.T) { longLogin := strings.Repeat("L", 5000) pr := srMergedPR() - pr.HTMLURL = gh.Ptr("https://example.com/" + strings.Repeat("u", 5000)) + pr.HTMLURL = new("https://example.com/" + strings.Repeat("u", 5000)) m := &mockReviewService{ prs: []*gh.PullRequest{pr}, reviews: []*gh.PullRequestReview{srReview(srUser(longLogin, 2, "User"), reviewStateApproved, srHeadSHA, srBaseTime.Add(time.Minute))}, @@ -1457,11 +1457,11 @@ func TestNewSourceReview_PRNumberDoesNotBypassMergeMatch(t *testing.T) { // queried source revision (and is not even merged) must NOT be bound to it via // --pr-number. Otherwise an unreviewed commit could borrow another PR's approvals. wellReviewedButUnrelated := &gh.PullRequest{ - Number: gh.Ptr(99), + Number: new(99), User: srUser("author", srAuthorID, "User"), - Head: &gh.PullRequestBranch{SHA: gh.Ptr(srHeadSHA)}, - Base: &gh.PullRequestBranch{Ref: gh.Ptr("main")}, - MergeCommitSHA: gh.Ptr("a-totally-different-commit-sha"), + Head: &gh.PullRequestBranch{SHA: new(srHeadSHA)}, + Base: &gh.PullRequestBranch{Ref: new("main")}, + MergeCommitSHA: new("a-totally-different-commit-sha"), // not merged (zero MergedAt) } opts := srOpts() diff --git a/pkg/release/cut.go b/pkg/release/cut.go index 3cb3bb6..8461254 100644 --- a/pkg/release/cut.go +++ b/pkg/release/cut.go @@ -11,7 +11,7 @@ import ( "github.com/go-git/go-git/v5" "github.com/go-git/go-git/v5/plumbing" "github.com/go-git/go-git/v5/plumbing/transport/http" - gogithub "github.com/google/go-github/v89/github" + gogithub "github.com/google/go-github/v91/github" githelper "github.com/liatrio/autogov/pkg/helper/git" "github.com/liatrio/autogov/pkg/mutate" "gopkg.in/yaml.v3" @@ -452,7 +452,7 @@ func performCutSideEffects(repo *git.Repository, opts *CutOptions, plan *Release // markReleasePublished flips a draft release to published via the GitHub API. func markReleasePublished(ctx context.Context, svc ReleaseService, owner, repo string, releaseID int64) error { - rel := gogithub.UpdateReleaseRequest{Draft: gogithub.Ptr(false)} + rel := gogithub.UpdateReleaseRequest{Draft: new(false)} _, resp, err := svc.UpdateRelease(ctx, owner, repo, releaseID, rel) if resp != nil { _ = resp.Body.Close() @@ -914,10 +914,10 @@ func createReleaseCommitViaAPI(ctx context.Context, repo *git.Repository, opts * return "", "", fmt.Errorf("failed to read mutated file %s: %w", filePath, err) } entries = append(entries, &gogithub.TreeEntry{ - Path: gogithub.Ptr(filePath), - Mode: gogithub.Ptr("100644"), - Type: gogithub.Ptr("blob"), - Content: gogithub.Ptr(string(content)), + Path: new(filePath), + Mode: new("100644"), + Type: new("blob"), + Content: new(string(content)), }) } @@ -937,9 +937,9 @@ func createReleaseCommitViaAPI(ctx context.Context, repo *git.Repository, opts * // create commit via API; omit author/committer so GitHub auto-signs as the // authenticated identity (SLSA v1.2 verified commits for bots) commit := gogithub.Commit{ - Message: gogithub.Ptr(buildCommitMessage(plan)), - Tree: &gogithub.Tree{SHA: gogithub.Ptr(treeSHA)}, - Parents: []*gogithub.Commit{{SHA: gogithub.Ptr(headSHA)}}, + Message: new(buildCommitMessage(plan)), + Tree: &gogithub.Tree{SHA: new(treeSHA)}, + Parents: []*gogithub.Commit{{SHA: new(headSHA)}}, } created, resp, err := opts.ReleaseAPI.CreateCommit(ctx, owner, repoName, commit, nil) @@ -1017,7 +1017,7 @@ func createAnnotatedTagViaAPI(ctx context.Context, opts *CutOptions, tagName, co func updateBranchRef(ctx context.Context, opts *CutOptions, owner, repoName, branch, commitSHA string) error { updateRef := gogithub.UpdateRef{ SHA: commitSHA, - Force: gogithub.Ptr(false), + Force: new(false), } _, resp, err := opts.ReleaseAPI.UpdateRef(ctx, owner, repoName, "refs/heads/"+branch, updateRef) @@ -1059,11 +1059,11 @@ func createGitHubRelease(repo *git.Repository, opts *CutOptions, plan *ReleasePl release := gogithub.CreateReleaseRequest{ TagName: plan.NextVersion, - Name: gogithub.Ptr(plan.NextVersion), - Body: gogithub.Ptr(plan.ChangelogPreview), - Draft: gogithub.Ptr(draft), - Prerelease: gogithub.Ptr(false), - GenerateReleaseNotes: gogithub.Ptr(false), + Name: new(plan.NextVersion), + Body: new(plan.ChangelogPreview), + Draft: new(draft), + Prerelease: new(false), + GenerateReleaseNotes: new(false), } created, resp, err := opts.ReleaseAPI.CreateRelease(ctx, parts[0], parts[1], release) diff --git a/pkg/release/cut_test.go b/pkg/release/cut_test.go index b0835c0..d9b112b 100644 --- a/pkg/release/cut_test.go +++ b/pkg/release/cut_test.go @@ -15,7 +15,7 @@ import ( gitconfig "github.com/go-git/go-git/v5/config" "github.com/go-git/go-git/v5/plumbing" "github.com/go-git/go-git/v5/plumbing/object" - gogithub "github.com/google/go-github/v89/github" + gogithub "github.com/google/go-github/v91/github" "github.com/stretchr/testify/assert" "github.com/stretchr/testify/require" "gopkg.in/yaml.v3" @@ -142,7 +142,7 @@ func (m *mockReleaseService) UploadReleaseAsset(_ context.Context, _, _ string, } m.uploadedAssetNames = append(m.uploadedAssetNames, opts.Name) m.uploadedAssetLabels = append(m.uploadedAssetLabels, opts.Label) - return &gogithub.ReleaseAsset{Name: gogithub.Ptr(opts.Name)}, mockResp(201), nil + return &gogithub.ReleaseAsset{Name: new(opts.Name)}, mockResp(201), nil } func (m *mockReleaseService) CreateTree(_ context.Context, _, _, _ string, _ []*gogithub.TreeEntry) (*gogithub.Tree, *gogithub.Response, error) { @@ -542,9 +542,9 @@ func TestExecuteCutFullFlowViaAPI(t *testing.T) { tagSHA := "def456789012345678901234567890abcdef1234" mock := &mockReleaseService{ - createTreeResult: &gogithub.Tree{SHA: gogithub.Ptr("tree-sha-123")}, - createCommitResult: &gogithub.Commit{SHA: gogithub.Ptr(commitSHA)}, - createTagResult: &gogithub.Tag{SHA: gogithub.Ptr(tagSHA)}, + createTreeResult: &gogithub.Tree{SHA: new("tree-sha-123")}, + createCommitResult: &gogithub.Commit{SHA: new(commitSHA)}, + createTagResult: &gogithub.Tag{SHA: new(tagSHA)}, createRefResult: &gogithub.Reference{}, updateRefResult: &gogithub.Reference{}, createRelease: &gogithub.RepositoryRelease{ @@ -817,9 +817,9 @@ func TestExecuteCutWithPublish(t *testing.T) { tagSHA := "def456789012345678901234567890abcdef1234" mock := &mockReleaseService{ - createTreeResult: &gogithub.Tree{SHA: gogithub.Ptr("tree-sha-123")}, - createCommitResult: &gogithub.Commit{SHA: gogithub.Ptr(commitSHA)}, - createTagResult: &gogithub.Tag{SHA: gogithub.Ptr(tagSHA)}, + createTreeResult: &gogithub.Tree{SHA: new("tree-sha-123")}, + createCommitResult: &gogithub.Commit{SHA: new(commitSHA)}, + createTagResult: &gogithub.Tag{SHA: new(tagSHA)}, createRefResult: &gogithub.Reference{}, updateRefResult: &gogithub.Reference{}, createRelease: &gogithub.RepositoryRelease{ @@ -879,9 +879,9 @@ func TestExecuteCutTagPlacement(t *testing.T) { tagSHA := "tag0000def456789012345678901234567890abcd" mock := &mockReleaseService{ - createTreeResult: &gogithub.Tree{SHA: gogithub.Ptr("tree-sha")}, - createCommitResult: &gogithub.Commit{SHA: gogithub.Ptr(releaseCommitSHA)}, - createTagResult: &gogithub.Tag{SHA: gogithub.Ptr(tagSHA)}, + createTreeResult: &gogithub.Tree{SHA: new("tree-sha")}, + createCommitResult: &gogithub.Commit{SHA: new(releaseCommitSHA)}, + createTagResult: &gogithub.Tag{SHA: new(tagSHA)}, createRefResult: &gogithub.Reference{}, updateRefResult: &gogithub.Reference{}, createRelease: &gogithub.RepositoryRelease{ @@ -1070,9 +1070,9 @@ func setupCutScenario(t *testing.T) (string, *mockReleaseService) { }) require.NoError(t, err) mock := &mockReleaseService{ - createTreeResult: &gogithub.Tree{SHA: gogithub.Ptr("tree-sha-123")}, - createCommitResult: &gogithub.Commit{SHA: gogithub.Ptr("abc123def456789012345678901234567890abcd")}, - createTagResult: &gogithub.Tag{SHA: gogithub.Ptr("def456789012345678901234567890abcdef1234")}, + createTreeResult: &gogithub.Tree{SHA: new("tree-sha-123")}, + createCommitResult: &gogithub.Commit{SHA: new("abc123def456789012345678901234567890abcd")}, + createTagResult: &gogithub.Tag{SHA: new("def456789012345678901234567890abcdef1234")}, createRefResult: &gogithub.Reference{}, updateRefResult: &gogithub.Reference{}, createRelease: &gogithub.RepositoryRelease{ @@ -1277,7 +1277,7 @@ func TestExecuteCutResumeUploadsMissingAssets(t *testing.T) { TagName: "v1.1.0", HTMLURL: "https://github.com/test/repo/releases/tag/v1.1.0", Draft: true, - Assets: []*gogithub.ReleaseAsset{{Name: gogithub.Ptr("first"), State: gogithub.Ptr("uploaded")}}, + Assets: []*gogithub.ReleaseAsset{{Name: new("first"), State: new("uploaded")}}, }} a := filepath.Join(t.TempDir(), "first") @@ -1312,8 +1312,8 @@ func TestExecuteCutResumeSkipsAttachedResolvedSourceVSA(t *testing.T) { HTMLURL: "https://github.com/test/repo/releases/tag/v1.1.0", Draft: true, Assets: []*gogithub.ReleaseAsset{{ - Name: gogithub.Ptr("vsa-image-PASSED.json"), - State: gogithub.Ptr("uploaded"), + Name: new("vsa-image-PASSED.json"), + State: new("uploaded"), }}, }} sourceDir := t.TempDir() @@ -1344,8 +1344,8 @@ func TestExecuteCutResumePublishesWhenAllAssetsPresent(t *testing.T) { HTMLURL: "https://github.com/test/repo/releases/tag/v1.1.0", Draft: true, Assets: []*gogithub.ReleaseAsset{ - {Name: gogithub.Ptr("first"), State: gogithub.Ptr("uploaded")}, - {Name: gogithub.Ptr("second"), State: gogithub.Ptr("uploaded")}, + {Name: new("first"), State: new("uploaded")}, + {Name: new("second"), State: new("uploaded")}, }, }} @@ -1378,7 +1378,7 @@ func TestExecuteCutResumeReuploadsIncompleteAsset(t *testing.T) { TagName: "v1.1.0", HTMLURL: "https://github.com/test/repo/releases/tag/v1.1.0", Draft: true, - Assets: []*gogithub.ReleaseAsset{{Name: gogithub.Ptr("first"), State: gogithub.Ptr("open")}}, + Assets: []*gogithub.ReleaseAsset{{Name: new("first"), State: new("open")}}, }} a := filepath.Join(t.TempDir(), "first") diff --git a/pkg/release/github_api.go b/pkg/release/github_api.go index 2257fad..b0f2397 100644 --- a/pkg/release/github_api.go +++ b/pkg/release/github_api.go @@ -6,7 +6,7 @@ import ( "sort" "strings" - gogithub "github.com/google/go-github/v89/github" + gogithub "github.com/google/go-github/v91/github" "github.com/liatrio/autogov/pkg/helper/version" ) diff --git a/pkg/release/github_api_test.go b/pkg/release/github_api_test.go index 43ed8a9..55eed32 100644 --- a/pkg/release/github_api_test.go +++ b/pkg/release/github_api_test.go @@ -7,7 +7,7 @@ import ( "github.com/go-git/go-git/v5" gitconfig "github.com/go-git/go-git/v5/config" - gogithub "github.com/google/go-github/v89/github" + gogithub "github.com/google/go-github/v91/github" "github.com/stretchr/testify/assert" "github.com/stretchr/testify/require" ) @@ -17,10 +17,10 @@ func TestListTagsFromAPI(t *testing.T) { t.Run("returns sorted semver tags descending", func(t *testing.T) { mock := &mockReleaseService{ listTagsResult: []*gogithub.RepositoryTag{ - {Name: gogithub.Ptr("v1.0.0")}, - {Name: gogithub.Ptr("v2.0.0")}, - {Name: gogithub.Ptr("v1.5.0")}, - {Name: gogithub.Ptr("not-semver")}, + {Name: new("v1.0.0")}, + {Name: new("v2.0.0")}, + {Name: new("v1.5.0")}, + {Name: new("not-semver")}, }, } tags, err := listTagsFromAPI(context.Background(), mock, "owner", "repo") @@ -55,25 +55,25 @@ func TestFilterFirstParent(t *testing.T) { // First-parent walk: E → B → A (not in list, stop). Result: B, E (skip D). commits := []*gogithub.RepositoryCommit{ { - SHA: gogithub.Ptr("D"), - Commit: &gogithub.Commit{Message: gogithub.Ptr("feat: branch work")}, + SHA: new("D"), + Commit: &gogithub.Commit{Message: new("feat: branch work")}, Parents: []*gogithub.Commit{ - {SHA: gogithub.Ptr("A")}, + {SHA: new("A")}, }, }, { - SHA: gogithub.Ptr("B"), - Commit: &gogithub.Commit{Message: gogithub.Ptr("fix: merge branch")}, + SHA: new("B"), + Commit: &gogithub.Commit{Message: new("fix: merge branch")}, Parents: []*gogithub.Commit{ - {SHA: gogithub.Ptr("A")}, // first parent is main line - {SHA: gogithub.Ptr("D")}, // second parent is merged branch + {SHA: new("A")}, // first parent is main line + {SHA: new("D")}, // second parent is merged branch }, }, { - SHA: gogithub.Ptr("E"), - Commit: &gogithub.Commit{Message: gogithub.Ptr("feat: after merge")}, + SHA: new("E"), + Commit: &gogithub.Commit{Message: new("feat: after merge")}, Parents: []*gogithub.Commit{ - {SHA: gogithub.Ptr("B")}, + {SHA: new("B")}, }, }, } @@ -87,18 +87,18 @@ func TestFilterFirstParent(t *testing.T) { t.Run("linear history returns all commits", func(t *testing.T) { commits := []*gogithub.RepositoryCommit{ { - SHA: gogithub.Ptr("A"), - Commit: &gogithub.Commit{Message: gogithub.Ptr("feat: first")}, + SHA: new("A"), + Commit: &gogithub.Commit{Message: new("feat: first")}, }, { - SHA: gogithub.Ptr("B"), - Commit: &gogithub.Commit{Message: gogithub.Ptr("fix: second")}, - Parents: []*gogithub.Commit{{SHA: gogithub.Ptr("A")}}, + SHA: new("B"), + Commit: &gogithub.Commit{Message: new("fix: second")}, + Parents: []*gogithub.Commit{{SHA: new("A")}}, }, { - SHA: gogithub.Ptr("C"), - Commit: &gogithub.Commit{Message: gogithub.Ptr("feat: third")}, - Parents: []*gogithub.Commit{{SHA: gogithub.Ptr("B")}}, + SHA: new("C"), + Commit: &gogithub.Commit{Message: new("feat: third")}, + Parents: []*gogithub.Commit{{SHA: new("B")}}, }, } @@ -116,7 +116,7 @@ func TestFilterFirstParent(t *testing.T) { t.Run("unknown head SHA returns empty", func(t *testing.T) { commits := []*gogithub.RepositoryCommit{ - {SHA: gogithub.Ptr("A"), Commit: &gogithub.Commit{Message: gogithub.Ptr("feat: something")}}, + {SHA: new("A"), Commit: &gogithub.Commit{Message: new("feat: something")}}, } result := filterFirstParent(commits, "UNKNOWN") assert.Empty(t, result) @@ -128,9 +128,9 @@ func TestGetBranchTipFromAPI(t *testing.T) { t.Run("returns tip SHA", func(t *testing.T) { mock := &mockReleaseService{ getBranchResult: &gogithub.Branch{ - Name: gogithub.Ptr("main"), + Name: new("main"), Commit: &gogithub.RepositoryCommit{ - SHA: gogithub.Ptr("abc123"), + SHA: new("abc123"), }, }, } @@ -148,7 +148,7 @@ func TestGetBranchTipFromAPI(t *testing.T) { t.Run("nil commit returns error", func(t *testing.T) { mock := &mockReleaseService{ - getBranchResult: &gogithub.Branch{Name: gogithub.Ptr("main"), Commit: nil}, + getBranchResult: &gogithub.Branch{Name: new("main"), Commit: nil}, } _, err := getBranchTipFromAPI(context.Background(), mock, "owner", "repo", "main") require.Error(t, err) @@ -183,9 +183,9 @@ func TestGetCommitsFromAPITruncated(t *testing.T) { totalCommits := 300 mock := &mockReleaseService{ compareResult: &gogithub.CommitsComparison{ - TotalCommits: gogithub.Ptr(totalCommits), + TotalCommits: new(totalCommits), Commits: []*gogithub.RepositoryCommit{ - {SHA: gogithub.Ptr("A"), Commit: &gogithub.Commit{Message: gogithub.Ptr("feat: one")}}, + {SHA: new("A"), Commit: &gogithub.Commit{Message: new("feat: one")}}, }, }, } @@ -200,16 +200,16 @@ func TestGetCommitsFromAPITruncated(t *testing.T) { func TestGetCommitsFromAPINonTruncated(t *testing.T) { mock := &mockReleaseService{ compareResult: &gogithub.CommitsComparison{ - TotalCommits: gogithub.Ptr(2), + TotalCommits: new(2), Commits: []*gogithub.RepositoryCommit{ { - SHA: gogithub.Ptr("A"), - Commit: &gogithub.Commit{Message: gogithub.Ptr("feat: first")}, + SHA: new("A"), + Commit: &gogithub.Commit{Message: new("feat: first")}, }, { - SHA: gogithub.Ptr("B"), - Commit: &gogithub.Commit{Message: gogithub.Ptr("fix: second")}, - Parents: []*gogithub.Commit{{SHA: gogithub.Ptr("A")}}, + SHA: new("B"), + Commit: &gogithub.Commit{Message: new("fix: second")}, + Parents: []*gogithub.Commit{{SHA: new("A")}}, }, }, }, @@ -282,12 +282,12 @@ func TestGeneratePlanAPIModeSuccess(t *testing.T) { mock := &mockReleaseService{ listTagsResult: []*gogithub.RepositoryTag{ - {Name: gogithub.Ptr("v1.0.0")}, + {Name: new("v1.0.0")}, }, compareResult: &gogithub.CommitsComparison{ - TotalCommits: gogithub.Ptr(1), + TotalCommits: new(1), Commits: []*gogithub.RepositoryCommit{ - {SHA: gogithub.Ptr(headSHA), Commit: &gogithub.Commit{Message: gogithub.Ptr("feat: add a thing")}}, + {SHA: new(headSHA), Commit: &gogithub.Commit{Message: new("feat: add a thing")}}, }, }, } diff --git a/pkg/release/publish.go b/pkg/release/publish.go index 4d72960..77dd469 100644 --- a/pkg/release/publish.go +++ b/pkg/release/publish.go @@ -10,7 +10,7 @@ import ( "github.com/go-git/go-git/v5" "github.com/go-git/go-git/v5/plumbing" "github.com/go-git/go-git/v5/plumbing/transport/http" - gogithub "github.com/google/go-github/v89/github" + gogithub "github.com/google/go-github/v91/github" githelper "github.com/liatrio/autogov/pkg/helper/git" ) @@ -277,7 +277,7 @@ func verifyTagExists(repo *git.Repository, opts *PublishOptions, tagName string) // publishRelease flips draft → false via GitHub API func publishRelease(ctx context.Context, opts *PublishOptions, owner, repo string, release *gogithub.RepositoryRelease) (*gogithub.RepositoryRelease, error) { update := gogithub.UpdateReleaseRequest{ - Draft: gogithub.Ptr(false), // flip to published + Draft: new(false), // flip to published } published, resp, err := opts.ReleaseAPI.UpdateRelease(ctx, owner, repo, release.GetID(), update) diff --git a/pkg/release/publish_test.go b/pkg/release/publish_test.go index 52a159e..fa95fa6 100644 --- a/pkg/release/publish_test.go +++ b/pkg/release/publish_test.go @@ -8,7 +8,7 @@ import ( "github.com/go-git/go-git/v5" gitconfig "github.com/go-git/go-git/v5/config" - gogithub "github.com/google/go-github/v89/github" + gogithub "github.com/google/go-github/v91/github" "github.com/stretchr/testify/assert" "github.com/stretchr/testify/require" )